Hallo,
erneut bekam ich nun wieder eine e-Mail
Bei der routinemäßigen Überprüfung der SSL/TLS-Zertifikate traten folgende Probleme auf:
------------------------------------
Certificate name: musik.retter-radio.de (Let's Encrypt)
Local resolving checks failed for domain "musik.retter-radio.de". Please ensure that your domain is locally resolvable!
Valid until: 2025-09-10 21:02:39 (19 day(s) left)
Die e-Mail wird vom KeyHelp Panel verschickt
Im Panel unter Domains wird auch angezeigt, das es zusätzliche Anweisungen gibt, das sind folgende:
Apache-Einstellungen -> Anweisungen für HTTPS
<IfModule mod_proxy.c>
ProxyPass /.well-known/acme-challenge !
</IfModule>
Alias /.well-known/acme-challenge/ /home/keyhelp/www/.well-known/acme-challenge
ProxyPass /
http://127.0.0.1:8000/
ProxyPassReverse /
http://127.0.0.1:8000/
Das selbe hatte ich das letzte mal auch für die stream.retter-radio.de und bekam dann auch irgendwann diese e-mail und nun habe ich erneut das Problem
root@root2206:~# wget musik.retter-radio.de
--2025-08-22 12:33:40--
http://musik.retter-radio.de/
Auflösen des Hostnamens musik.retter-radio.de (musik.retter-radio.de)… 193.32.22 2.38
Verbindungsaufbau zu musik.retter-radio.de (musik.retter-radio.de)|193.32.222.38 |:80 … verbunden.
HTTP-Anforderung gesendet, auf Antwort wird gewartet … 301 Moved Permanently
Platz:
https://musik.retter-radio.de/ [folgend]
--2025-08-22 12:33:40--
https://musik.retter-radio.de/
Verbindungsaufbau zu musik.retter-radio.de (musik.retter-radio.de)|193.32.222.38 |:443 … verbunden.
HTTP-Anforderung gesendet, auf Antwort wird gewartet … 200 OK
Länge: nicht spezifiziert [audio/mpeg]
Wird in »index.html« gespeichert.
root@root2206:~# curl musik.retter-radio.de
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="
https://musik.retter-radio.de/">here</a>.</p>
</body></html>
Laut Serveranbieter liegt es an keyHelp ??
root@root2206:~# keyhelp run ssl-maintenance
[PID-2636119] [2025-08-22 12:38:10] INFO | forced to run "ssl_maintenance.php"
[PID-2636119] [2025-08-22 12:38:10] INFO | jobs to run: ssl_maintenance.php
[PID-2636119] [2025-08-22 12:38:10] INFO | >>> trying to run "ssl-maintenance"
[PID-2636119] [2025-08-22 12:38:10] INFO | lock "ssl-maintenance" acquired
[PID-2636119] [2025-08-22 12:38:10] INFO | processing the job ...
[2025-08-22 12:38:10] INFO | starting ssl certification maintenance
[2025-08-22 12:38:10] INFO | checking (normal) SSL/TLS certificates
[2025-08-22 12:38:10] INFO | check certificate "[ID 1]"
[2025-08-22 12:38:10] INFO | certificate name is "default"
[2025-08-22 12:38:10] INFO | certificate is valid until 2034-01-14 16:22:08 (3067 days left)
[2025-08-22 12:38:10] INFO | checking lets encrypt certificates
[2025-08-22 12:38:10] INFO | remove unused accounts / certificates
[2025-08-22 12:38:10] INFO | check domain "bos-freunde.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-12 23:02:39 (51 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.bos-freunde.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-12 23:02:51 (51 days left)
[2025-08-22 12:38:10] INFO | check domain "feuerwehrlive.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:02:38 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "home4players.com'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:02:48 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.home4players.com'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-18 23:02:39 (57 days left)
[2025-08-22 12:38:10] INFO | check domain "retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:00 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:09 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "retterfreunde.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:19 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.retterfreunde.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:28 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "rr-tappi.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-15 23:02:38 (54 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.rr-tappi.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-15 23:02:50 (54 days left)
[2025-08-22 12:38:10] INFO | check domain "android.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:35 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "ebay.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:45 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "download.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:03:57 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "itunes.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:04:04 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "radiostatistik.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:04:14 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "plattenkiste.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:04:21 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "bnc-panel.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:04:31 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "homepage.feuerwehrlive.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:04:41 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.feuerwehrlive.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:04:51 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "php8.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-16 23:05:02 (55 days left)
[2025-08-22 12:38:10] INFO | check domain "liebevoll-selbstgemacht-bylisa.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-27 22:02:38 (66 days left)
[2025-08-22 12:38:10] INFO | check domain "
www.liebevoll-selbstgemacht-bylisa.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-27 22:02:46 (66 days left)
[2025-08-22 12:38:10] INFO | check domain "map.feuerwehrlive.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-10-26 22:02:39 (65 days left)
[2025-08-22 12:38:10] INFO | check domain "musik.retter-radio.de'
[2025-08-22 12:38:10] INFO | certificate is valid until 2025-09-10 21:02:39 (19 days left)
[2025-08-22 12:38:10] INFO | certificate is in renewal period
[2025-08-22 12:38:10] INFO | renew cert
[2025-08-22 12:38:10] INFO | Using certificate authority: "
https://acme-v02.api.letsencrypt.org/" (PRODUCTION).
[2025-08-22 12:38:10] INFO | Getting endpoint URLs.
[2025-08-22 12:38:10] INFO | Account "retterradio" already registered. Continue.
[2025-08-22 12:38:10] INFO | Requesting Key ID.
[2025-08-22 12:38:10] INFO | Sending signed request to "
https://acme-v02.api.letsencrypt.org/acme/new-acct".
[2025-08-22 12:38:11] INFO | Start certificate generation.
[2025-08-22 12:38:11] INFO | Token stored at: /home/keyhelp/www/.well-known/acme-challenge/local-check-68a84893515851.51002244
[2025-08-22 12:38:11] INFO | URL:
http://musik.retter-radio.de/.well-know ... 1.51002244 | HTTP code: 403 | HTTP body (first 100 chars): <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head>
[2025-08-22 12:38:11] ERROR | a Let's Encrypt error occurred: Local resolving checks failed for domain "musik.retter-radio.de". Please ensure that your domain is locally resolvable!
[2025-08-22 12:38:11] INFO | finished
[PID-2636119] [2025-08-22 12:38:11] INFO | <<< job done, releasing lock "ssl-maintenance"
root@root2206:~#
Das steht im error.log
[Fri Aug 22 00:00:19.773571 2025] [ssl:error] [pid 1255:tid 1255] AH02218: ssl_stapling_init_cert: no OCSP URI in certificate and no SSLStaplingForceURL set [subject: CN=musik.retter-radio.de / issuer: CN=R10,O=Let's Encrypt,C=US / serial: 05D70122A0F310F23E9FCB8E815465C69311 / notbefore: Jun 12 19:02:40 2025 GMT / notafter: Sep 10 19:02:39 2025 GMT]
[Fri Aug 22 00:00:19.773593 2025] [ssl:error] [pid 1255:tid 1255] AH02604: Unable to configure certificate musik.retter-radio.de:443:0 for stapling
[Fri Aug 22 00:01:03.026135 2025] [authz_core:error] [pid 2499331:tid 2499345] [remote 193.32.222.38:50276] AH01630: client denied by server configuration: /home/keyhelp/www/.well-known/acme-challengelocal-check-68a7971f007837.25893567
[Fri Aug 22 12:38:11.342667 2025] [authz_core:error] [pid 2561388:tid 2561403] [remote 193.32.222.38:33652] AH01630: client denied by server configuration: /home/keyhelp/www/.well-known/acme-challengelocal-check-68a84893515851.51002244